Lucene search
+L

8 matches found

OSV
OSV
added 2026/07/07 11:45 a.m.7 views

PYSEC-2026-1565 RunGptLLM class in LlamaIndex has a command injection

A command injection vulnerability exists in the RunGptLLM class of the llamaindex library, version 0.9.47, used by the RunGpt framework from JinaAI to connect to Language Learning Models LLMs. The vulnerability arises from the improper use of the eval function, allowing a malicious or compromised...

8.8CVSS7.4AI score0.02118EPSS
SaveExploits1References6
Rows per page
Query Builder